Merchants are required to inspect their devices for signs of tampering before the start of business. They are also required to keep a written or electronic log of these device inspections, which includes recording who did the inspections. The tamper inspections and inspection logging are part of overall compliance to PCI Data Security Standard. 

A merchant must be able to immediately produce these logs upon request. If useful, please see below for a sample inspection log which has been provided to us by CampusGuard, U-M's Qualified Security Assessor company.  A merchant may certainly add additional areas to inspect, as seen appropriate. 

If any signs of terminal tampering exist, including if a terminal is not able to be located, a merchant should notify the Treasurer’s Office immediately by emailing [email protected] with full details.